c8b8f99fdb51793cba9e020468b2b25ae6ac16f54f5a5787820ff76dc49f80a4

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 17:43

Target
SecroKit v2.0.rar
Size 26.5MB
Sample261017-wap7dsbs31
SHA256 c8b8f99fdb51793cba9e020468b2b25ae6ac16f54f5a5787820ff76dc49f80a4
MD5 1f6111fab48758ff8d6dd396228eda02
SHA1 bb26c383472196c068b0316a9998bb451d565dc5
SHA512 25b5dd65242eb855a13fe773a5e35c3c297720a69f6dee4c7c791bae39c1fdb982665193259a9f5f2b551b29c905130a7a8aa322694ca95d685871305ca9fc0d
SSDEEP 786432:ZMSi/Z2azPqRWZG0AsP5ksr+pW0TVv2+moXI52/0:Gj0abqRWwwpcfTV++mBk/0
TLSH
T17957339A5DB0C7B7F8CBD004E85ECAEC44589F3C06DCDA2A2475252B606DE3161FECA5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3060	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3060	7zFM.exe
Token: 35	3060	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3060	7zFM.exe